database-maintenance
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for administrative database tasks and explicitly incorporates security principles (OWASP ASI). The following observations support a safe verdict:
- Identity & Privilege Abuse (ASI03): Instructions mandate the use of least-privilege roles and avoid superuser connections for routine tasks.
- RCE Guard (ASI05): Core rules require parameterizing maintenance commands to prevent SQL injection or arbitrary command execution.
- Relational Safety: The skill enforces non-blocking operations using
REINDEX CONCURRENTLYand mandatory lock timeouts (SET lock_timeout = '2s') to prevent denial-of-service via lock starvation. - Lakehouse Integrity: Maintenance procedures for Apache Iceberg and Delta Lake include safety floors (e.g., 50-snapshot minimum) and grace periods (72-hour vacuum window) to prevent accidental data loss or corruption during cleanup.
- Tooling: The requested tools are standard for database operations and data management. All documented procedures involve standard database utilities and system calls without suspicious network or file system activities.
Audit Metadata